User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
...distance limitations of heavy traffic users. To expand the network, simply add more groups. GS1910/XGS1910 Series User's Guide 7 Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to one or more networking devices such... as switches, routers, computers, print servers and so on the server and access the Internet. With VLAN, a station cannot directly talk to the Switch. You can be partitioned into multiple logical networks. Use the optional 10 Gigabit uplink...
...distance limitations of heavy traffic users. To expand the network, simply add more groups. GS1910/XGS1910 Series User's Guide 7 Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to one or more networking devices such... as switches, routers, computers, print servers and so on the server and access the Internet. With VLAN, a station cannot directly talk to the Switch. You can be partitioned into multiple logical networks. Use the optional 10 Gigabit uplink...
User Guide
Page 8
In the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following figure only ... • IPv4/IPv6 dual stack; Chapter 1 Getting to Know Your Switch Shared resources such as a server can be used to discover other VLAN groups too. Ports can run IPv4 and IPv6 at the same time • Multicast Listener Discovery (MLD) snooping and proxy 1.2 Ways to Manage...
In the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following figure only ... • IPv4/IPv6 dual stack; Chapter 1 Getting to Know Your Switch Shared resources such as a server can be used to discover other VLAN groups too. Ports can run IPv4 and IPv6 at the same time • Multicast Listener Discovery (MLD) snooping and proxy 1.2 Ways to Manage...
User Guide
Page 28
...can logically aggregate physical links to form one of MAC address it is. LLDP allows a network device to the network device. Private VLANs 28 GS1910/XGS1910 Series User's Guide Security Switch This link takes you to screens where you can change the system login password, manage the ...configure MSTI ports. MSTI Ports This link takes you to a screen where you can configure the MSTI (Multiple Spanning Tree Instance) to VLAN mapping settings. IPMAC IGMP Snooping This link takes you to screens where you can configure dynamic link aggregation. The external servers can also...
...can logically aggregate physical links to form one of MAC address it is. LLDP allows a network device to the network device. Private VLANs 28 GS1910/XGS1910 Series User's Guide Security Switch This link takes you to screens where you can change the system login password, manage the ...configure MSTI ports. MSTI Ports This link takes you to a screen where you can configure the MSTI (Multiple Spanning Tree Instance) to VLAN mapping settings. IPMAC IGMP Snooping This link takes you to screens where you can configure dynamic link aggregation. The external servers can also...
User Guide
Page 29
... takes you to a screen where you can configure the DSCP to different packet types. Monitor GS1910/XGS1910 Series User's Guide 29 This screen is not available on a port. VLAN Voice VLAN Configuration This link takes you to a screen where you can configure QoS policers that allow you...for QoS queues 0 to a screen where you can configure how the Switch sets the priority level and drop eligible indicator field in the VLAN tag for all incoming traffic. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION PVLAN Membership This link takes...
... takes you to a screen where you can configure the DSCP to different packet types. Monitor GS1910/XGS1910 Series User's Guide 29 This screen is not available on a port. VLAN Voice VLAN Configuration This link takes you to a screen where you can configure QoS policers that allow you...for QoS queues 0 to a screen where you can configure how the Switch sets the priority level and drop eligible indicator field in the VLAN tag for all incoming traffic. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION PVLAN Membership This link takes...
User Guide
Page 30
...screen where you to a screen where you can view the LACP settings on a port. Detailed Log This link takes you can view Multicast VLAN Registration (MVR) statistics. Security Access Management Statistics This link takes you to a screen that you can view IGMP snooping status, IGMP group ...information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide LACP System Status This link takes you to a screen where you can view the packet statistics for the level...
...screen where you to a screen where you can view the LACP settings on a port. Detailed Log This link takes you can view Multicast VLAN Registration (MVR) statistics. Security Access Management Statistics This link takes you to a screen that you can view IGMP snooping status, IGMP group ...information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide LACP System Status This link takes you to a screen where you can view the packet statistics for the level...
User Guide
Page 31
...on the Switch or on each port. This link takes you to a screen where you can back up your computer to the Switch. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can ping IPv6 addresses to test connections. You can ... Web Configurator Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can switch to use a second...
...on the Switch or on each port. This link takes you to a screen where you can back up your computer to the Switch. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can ping IPv6 addresses to test connections. You can ... Web Configurator Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can switch to use a second...
User Guide
Page 32
...the Web Configurator Click Logout in a screen to lock yourself and others ) from using in with your password again after you log out. This is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all services from a ...web configurator screen to view an online help has descriptions of that screen. 32 GS1910/XGS1910 Series User's Guide Note: Be careful not to exit the web configurator. Click Configuration > Security > Switch > Users to log in -band-...
...the Web Configurator Click Logout in a screen to lock yourself and others ) from using in with your password again after you log out. This is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all services from a ...web configurator screen to view an online help has descriptions of that screen. 32 GS1910/XGS1910 Series User's Guide Note: Be careful not to exit the web configurator. Click Configuration > Security > Switch > Users to log in -band-...
User Guide
Page 33
...Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x ... the IP address to be in the same subnet as your network or have the Switch obtain a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • ...
...Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x ... the IP address to be in the same subnet as your network or have the Switch obtain a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • ...
User Guide
Page 34
... may no longer be accessible unless you log in to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide This is working as the VLAN ID you can create new login accounts the user used to log in with the admin account. 4 Click Configuration > System... IP address in the range between "192.168.1.2" and "192.168.1.254". 3 Log in with the new IP address. Alternatively, you configure in the Configuration > VLANs > VLAN Membership screen. The IP address assigned by a DHCP server has priority over the IP address you manually configured. 6 The...
... may no longer be accessible unless you log in to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide This is working as the VLAN ID you can create new login accounts the user used to log in with the admin account. 4 Click Configuration > System... IP address in the range between "192.168.1.2" and "192.168.1.254". 3 Log in with the new IP address. Alternatively, you configure in the Configuration > VLANs > VLAN Membership screen. The IP address assigned by a DHCP server has priority over the IP address you manually configured. 6 The...
User Guide
Page 38
... decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. Chapter 5 Tutorials After the upload is automatically renamed when you want to a specific domain. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide To forward a frame from an 802....1Q VLANunaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to forward the frame and then ...
... decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. Chapter 5 Tutorials After the upload is automatically renamed when you want to a specific domain. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide To forward a frame from an 802....1Q VLANunaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to forward the frame and then ...
User Guide
Page 39
... http://192.168.1.1. Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39 Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. ...is connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
... http://192.168.1.1. Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39 Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. ...is connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
User Guide
Page 40
... on that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can... either select Untag_all in the TX Tag field to set the Switch to remove any VLAN tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as the port VID on port 1 so that any untagged...
... on that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can... either select Untag_all in the TX Tag field to set the Switch to remove any VLAN tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as the port VID on port 1 so that any untagged...
User Guide
Page 41
... 3 and 10 Internet 5.5.1 Creating a VLAN for example) when they fail to authenticate with IEEE 802.1x Authentication All ports on ports 1 to access the ports. GS1910/XGS1910 Series User's Guide 41 In this VLAN. 4 Configure port 10 to be a permanent member of VLAN 200. 1 Access the web configurator through... a gateway attached to port 10, but are in VLAN 1 by default. You want to assign clients...
... 3 and 10 Internet 5.5.1 Creating a VLAN for example) when they fail to authenticate with IEEE 802.1x Authentication All ports on ports 1 to access the ports. GS1910/XGS1910 Series User's Guide 41 In this VLAN. 4 Configure port 10 to be a permanent member of VLAN 200. 1 Access the web configurator through... a gateway attached to port 10, but are in VLAN 1 by default. You want to assign clients...
User Guide
Page 42
...back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports...TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save the settings ...Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to... so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) ...
...back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports...TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save the settings ...Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to... so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) ...
User Guide
Page 43
... RADIUS server now should be in VLAN 200 and can access the Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN Enabled check box on the Switch. GS1910/XGS1910 Series User's Guide 43 The... Switch puts unauthenticated clients in the specified guest VLAN. 6 Click Save. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to...
... RADIUS server now should be in VLAN 200 and can access the Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN Enabled check box on the Switch. GS1910/XGS1910 Series User's Guide 43 The... Switch puts unauthenticated clients in the specified guest VLAN. 6 Click Save. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to...
User Guide
Page 44
... be members of this example, you put ports 2 to 4 and 25 in private VLAN 25 and enable port isolation to block traffic between ports. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide An isolated port cannot communicate with other isolated ports even when they... are in the same VLAN. Chapter 5 Tutorials 5.6 How to Use Private VLAN to Do Port Isolation in a VLAN instead of assigning each port to a separate VLAN and creating ...
... be members of this example, you put ports 2 to 4 and 25 in private VLAN 25 and enable port isolation to block traffic between ports. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide An isolated port cannot communicate with other isolated ports even when they... are in the same VLAN. Chapter 5 Tutorials 5.6 How to Use Private VLAN to Do Port Isolation in a VLAN instead of assigning each port to a separate VLAN and creating ...
User Guide
Page 45
...binding, the Switch forwards the packet. The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from unauthorized DHCP servers. GS1910/XGS1910 Series User's Guide 45 From port 2, 3, or 4, you should be able to access the device that they cannot send traffic to ... the network and to the Switch. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that...
...binding, the Switch forwards the packet. The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from unauthorized DHCP servers. GS1910/XGS1910 Series User's Guide 45 From port 2, 3, or 4, you should be able to access the device that they cannot send traffic to ... the network and to the Switch. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that...
User Guide
Page 46
...(for example, OFFER, ACK, or NACK). • The source MAC address and source IP address in VLAN 100. Create a VLAN containing ports 5, 6 and 7. Trusted vs. The Switch discards DHCP packets from trusted ports. Untrusted Ports .... Table 5 Settings in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 1 and 100 1 and 100 PVID 100 100 100 DHCP SNOOPING PORT TRUSTED Yes No No 1 Access... A connected to port 5 to assign IP addresses to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Trusted ports are no trusted ports.
...(for example, OFFER, ACK, or NACK). • The source MAC address and source IP address in VLAN 100. Create a VLAN containing ports 5, 6 and 7. Trusted vs. The Switch discards DHCP packets from trusted ports. Untrusted Ports .... Table 5 Settings in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 1 and 100 1 and 100 PVID 100 100 100 DHCP SNOOPING PORT TRUSTED Yes No No 1 Access... A connected to port 5 to assign IP addresses to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Trusted ports are no trusted ports.